cve/2023/CVE-2023-2008.md

### [CVE-2023-2008](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2008)
![](https://img.shields.io/static/v1?label=Product&message=Linux%20kernel%20udmabuf%20device%20driver&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-129&color=brighgreen)

### Description

A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/CVEDB/awesome-cve-repo
- https://github.com/IdanBanani/Linux-Kernel-VR-Exploitation
- https://github.com/Mr-xn/Penetration_Testing_POC
- https://github.com/bluefrostsecurity/CVE-2023-2008
- https://github.com/em1ga3l/cve-msrc-extractor
- https://github.com/lions2012/Penetration_Testing_POC
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/xairy/linux-kernel-exploitation